topic Re: Phantom - Assign Container/Case to Self - Playbook in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/Phantom-Assign-Container-Case-to-Self-Playbook/m-p/456087#M6449 <P>have used something like below in the playbook for the same</P> <PRE><CODE>playbook_info = phantom.get_playbook_info() phantom.set_owner(container, playbook_info[0]['effective_user_id']),I have used something below in my playbook. </CODE></PRE> <P>playbook_info = phantom.get_playbook_info()<BR /> phantom.set_owner(container, playbook_info[0]['effective_user_id'])</P> Wed, 30 Sep 2020 01:11:34 GMT 1549359 2020-09-30T01:11:34Z Phantom - Assign Container/Case to Self - Playbook https://community.splunk.com/t5/Splunk-Enterprise-Security/Phantom-Assign-Container-Case-to-Self-Playbook/m-p/456086#M6448 <P>I am working on automating some minor things and I want to add in a step to have the playbook assign the container or case to the user running the playbook. <BR /> I am currently using a rest call to get the last user who opened the current item but there are some issues with this.</P> <P>Does anyone know if there is a more specific call to get the current user value in Phantom like Splunk can with </P> <P><CODE>| rest /services/authentication/current-context <BR /> | table username</CODE></P> Wed, 03 Jul 2019 18:05:18 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Phantom-Assign-Container-Case-to-Self-Playbook/m-p/456086#M6448 jamolson 2019-07-03T18:05:18Z Re: Phantom - Assign Container/Case to Self - Playbook https://community.splunk.com/t5/Splunk-Enterprise-Security/Phantom-Assign-Container-Case-to-Self-Playbook/m-p/456087#M6449 <P>have used something like below in the playbook for the same</P> <PRE><CODE>playbook_info = phantom.get_playbook_info() phantom.set_owner(container, playbook_info[0]['effective_user_id']),I have used something below in my playbook. </CODE></PRE> <P>playbook_info = phantom.get_playbook_info()<BR /> phantom.set_owner(container, playbook_info[0]['effective_user_id'])</P> Wed, 30 Sep 2020 01:11:34 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Phantom-Assign-Container-Case-to-Self-Playbook/m-p/456087#M6449 1549359 2020-09-30T01:11:34Z Re: Phantom - Assign Container/Case to Self - Playbook https://community.splunk.com/t5/Splunk-Enterprise-Security/Phantom-Assign-Container-Case-to-Self-Playbook/m-p/456088#M6450 <P>Thank you very much, this is perfect. </P> Mon, 08 Jul 2019 15:09:20 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Phantom-Assign-Container-Case-to-Self-Playbook/m-p/456088#M6450 jamolson 2019-07-08T15:09:20Z